Source: authbind Version: 3.0.3.5 Severity: wishlist Tags: patch User: [email protected] Usertags: timestamps X-Debbugs-Cc: [email protected]
Hi! While working on the “reproducible builds” effort [1], we have noticed that authbind could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds
diff -Nru authbind-2.1.1/debian/changelog authbind-2.1.1+nmu1/debian/changelog --- authbind-2.1.1/debian/changelog 2012-06-11 00:17:19.000000000 +0200 +++ authbind-2.1.1+nmu1/debian/changelog 2015-07-15 23:42:10.000000000 +0200 @@ -1,3 +1,10 @@ +authbind (2.1.1+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira <[email protected]> Wed, 15 Jul 2015 23:40:51 +0200 + authbind (2.1.1) unstable; urgency=low * Manpage has an example of which files will be checked and read diff -Nru authbind-2.1.1/debian/rules authbind-2.1.1+nmu1/debian/rules --- authbind-2.1.1/debian/rules 2012-06-03 02:45:04.000000000 +0200 +++ authbind-2.1.1+nmu1/debian/rules 2015-07-15 23:37:33.000000000 +0200 @@ -29,6 +29,8 @@ arch = $(shell dpkg --print-architecture) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + INSTALL = install INSTALL_FILE = $(INSTALL) -p -o root -g root -m 644 INSTALL_PROGRAM = $(INSTALL) -p -o root -g root -m 755 @@ -90,6 +92,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R g-ws debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch
